Thesilentdawn

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the `USBH ParseDevDesc()` function, which can lead to a denial of service (DOS) when a malformed USB device packet is received. Recommendations: For versions 1.8.0 and below, consider disabling the `USBH ParseDevDesc()` function until a patch is available to prevent potential denial of service attacks.

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the `USBH ParseCfgDesc()` function, which leads to a denial of service due to the system hanging when trying to set a remote wake-up feature. Recommendations: For versions 1.8.0 and below, consider disabling the remote wake-up feature to prevent the system from hanging until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: A buffer overflow vulnerability in the `USBH ParseEPDesc()` function allows attackers to execute arbitrary code. Recommendations: For versions 1.8.0 and below, consider disabling the `USBH ParseEPDesc()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: The issue is caused by a problem in the `USBH MSC InterfaceInit()` function, leading to a denial of service (DOS) when the system attempts to communicate with the connected endpoint. Recommendations: For versions 1.8.0 and below, consider disabling the `USBH MSC InterfaceInit()` function as a temporary workaround to prevent potential denial of service attacks until a patch is available.

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: A buffer overflow vulnerability in the `USBH ParseCfgDesc()` function allows attackers to execute arbitrary code. Recommendations: For versions 1.8.0 and below, consider disabling the `USBH ParseCfgDesc()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32Cube Middleware versions 1.8.0 and below Description: A buffer overflow vulnerability in the `USBH ParseInterfaceDesc()` function allows attackers to execute arbitrary code. Recommendations: For versions 1.8.0 and below, consider disabling the `USBH ParseInterfaceDesc()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Arm Mbed OS version 5.14.0 **Description** An integer overflow was discovered in the CoAP library. The issue arises from the function `sn coap builder calc needed packet data size 2()`, which calculates the required memory for the CoAP message. The variables `returned byte count` and `src coap msg ptr->payload len` are of type `uint16 t`. When these values are added together, the result `returned byte count` can exceed the maximum `uint16 t` value, causing a wrap-around. This leads to insufficient buffer space being allocated for the corresponding CoAP message. **Recommendations** For Arm Mbed OS version 5.14.0, consider modifying the `sn coap builder calc needed packet data size 2()` function to handle the integer overflow, ensuring sufficient buffer space is allocated for CoAP messages.

**Name of the Vulnerable Software and Affected Versions** Arm Mbed OS version 5.14.0 **Description** A buffer overflow issue was discovered in the CoAP library of Arm Mbed OS. The CoAP parser, specifically the function `sn coap parser options parse()`, is responsible for parsing received CoAP packets. The issue arises from the lack of strict enforcement of the `*packet data pptr` value within the while loop, allowing it to be increased and then dereferenced without proper bounds checking. This, along with similar issues in other `sn coap parser ****()` functions, can lead to heap-based or stack-based buffer overflows, depending on the allocation of the CoAP packet buffer. **Recommendations** For Arm Mbed OS version 5.14.0, consider disabling the `sn coap parser options parse()` function until a patch is available to prevent potential buffer overflows. Additionally, restrict the use of other `sn coap parser ****()` functions that do not properly check the bounds of the allocated buffer to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Arm Mbed OS version 2017-11-02 **Description** A denial-of-service issue was discovered in the MQTT library. The `readMQTTLenString()` function is vulnerable to manipulation, allowing an attacker to change the `mqttstring->lenstring.len` value to a larger value, skipping the if statement and defaulting `mqttstring->lenstring.data` to zero. This leads to unpredictable program behavior when `curn` is accessed, which points to `mqttstring->lenstring.data`. The behavior is highly dependent on the actual firmware. **Recommendations** For Arm Mbed OS version 2017-11-02, consider disabling the `readMQTTLenString()` function as a temporary workaround until a patch is available. Restrict access to the MQTT library to minimize the risk of exploitation. Avoid using the `mqttstring->lenstring.len` variable in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.